Openshift operator for host whitelisting and label assignment on Route.
- OpenShift 4.6.6 (Kubernetes v1.19.0+43983cd)
- OKD 4.5.0-0.okd-2020-07-14-153706 (Kubernetes v1.18.3)
This operator is distributed using Helm 3
helm repo add cedio https://cedricpoon.github.io/openshift-route-admissioner
helm repo update
helm search repo cedio/route-admissioner
helm install route-admissioner cedio/route-admissioner --namespace route-admissioner-operator
You can set Pod Count
for Deployment Configs
to the size of nodes in cluster.
The whitelisting guard for Route
host is applied based on Namespace
annotation.
kind: Namespace
metadata:
labels:
route-admissioner/enabled: ''
annotations:
route-admissioner/allowed-domain: 'xxx.hk,yyy.now'
Route admissioner uses Configmap/route-admissioner-label-map
for labelling Route
which matches the rule set.
data:
key: "route-admissioner/toggled"
map: |-
[
{
"domain": "xxx.hk",
"value": "True"
},
{
"domain": "yyy.now",
"value": "True"
},
{
"domain": "zzz.com",
"value": "True"
}
]
Resulting object with host one.xxx.hk
will be
kind: Route
metadata:
labels:
route-admissioner/toggled: True
- banzaicloud/admission-webhook-example, https://github.com/banzaicloud/admission-webhook-example